Skip to content

Conversation

jku
Copy link
Member

@jku jku commented Jun 12, 2025

Fixes #821 by adding support for --trusted-root into our conformance client.

Annoyingly this requires writing a temporary (trust config) file on disk since that is what sigstore-python CLI needs instead of the provided trustedroot file.

This revealed a new issue #1442

@jku jku changed the title Conformance update Conformance client update Jun 12, 2025
@jku jku force-pushed the conformance-update branch from 64dd17c to 08c7e84 Compare June 13, 2025 07:38
This contains working staging support

Signed-off-by: Jussi Kukkonen <[email protected]>
@jku jku force-pushed the conformance-update branch 2 times, most recently from c1f4419 to add5ac4 Compare June 13, 2025 07:46
conformance clients are given "--trusted-root" but sigstore-python
requires "--trust-config". Build a trust config and provide that in the
conformance client script.

The conformance scipt is getting closer and closer to the point where
just tweaking argv is not really the smart thing to do... but it's still
manageable.

This revealed a new bug so one test remains "xfail".

Signed-off-by: Jussi Kukkonen <[email protected]>
@jku jku force-pushed the conformance-update branch from add5ac4 to c9c3ad3 Compare June 13, 2025 07:48
Signed-off-by: Jussi Kukkonen <[email protected]>
@woodruffw woodruffw merged commit 7b532d4 into sigstore:main Jun 13, 2025
23 checks passed
@woodruffw
Copy link
Member

Thanks @jku!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Conformance: sigstore-python's conformance runner should support --trusted-root
2 participants